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Top Stories 

• A former Liberty Reserve executive pleaded guilty in New York September 23 for his role 
in running an unlicensed Web-based company that laundered over $6 billion from more 
than a million individuals worldwide between 2006 and 2013. - SecurityWeek (See item 7 ) 

• Two employees were shot and killed by a recently-terminated UPS worker who opened fire 
at a facility in Inglenook, Alabama, September 23 prior to taking his own life. - CNN (See 
item 12) 

• Fire crews reached 35 percent containment September 23 of the 89,574-acre King Fire 
burning in El Dorado and Placer counties in California, while 21,000 structures remained 
threatened and about 2,800 residents were still under evacuation orders. - KXTV 10 
Sacramento (See item 20 ) 

• A September 24 restaurant fire in Apollo Beach, Florida, prompted the evacuation of 
nearby homes, a shelter-in-place order for an elementary school, and a 5-hour closure of 
U.S. Highway 41. - WTSP 10 St. Petersburg (See item 31 ) 
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Energy Sector 



1. September 24, Associated Press - (Wyoming) 4 injured in natural gas tank blast in 
Wyoming. Two EOG Resources employees and two contractors were injured in an 
explosion at a natural gas storage tank in Lincoln County, Wyoming, September 23. 
The explosion occurred while the workers were cleaning out the tank at the Williams- 
owned plant and the cause remains under investigation. 

Source: http://www.businessweek.com/ap/2014-09-24/4-injured-in-natural-gas-tank- 
blast-in-wyoming 

2. September 23, Anderson Independent-Mail - (South Carolina) Duke to start clearing 
coal ash from Saluda River site. Duke Energy announced September 23 that it will 
submit plans by the end of 2014 to the South Carolina Public Service Commission to 
remove coal ash stored at two ash basins along the Saluda River. The utility will move 
the ash to a facility off-site or place a lined and capped landfill at the W.S. Lee steam 
plant near Williamston. 

Source: http://www.thestate.com/2014/09/23/3700842 duke-to-start-clearing-coal- 
ash.html 

3. September 23, WTHR 13 Indianapolis - (Indiana) Pipeline fire prompts evacuations 
near Elwood. A fire from a ruptured natural gas pipeline near Elwood in Madison 
County burned out 3 hours after a vehicle ran over a roadside valve igniting the blaze 
September 23. Vectren and Panhandle Eastern closed off the line between two valves 
while two nearby farms were evacuated and 900 West between 900 North and State 
Route 128 was closed as a precaution. 

Source: http://www.wthr.corn/storv/26600403/2014/09/23/pipeline-fire-prompts- 
evacuations-near-elwood 

T Return to top i 

Chemical Industry Sector 

Nothing to report 



T Return to top i 

Nuclear Reactors, Materials, and Waste Sector 

4. September 24, St. Joseph Herald- Palladium - (Michigan) D.C. Cook nuclear plant 
Unit 1 down for refueling. Planned refueling and maintenance work began September 
24 on Unit 1 at the Donald C. Cook nuclear plant in Bridgman forcing the reactor to be 
shut off while workers replace two 58-ton feedwater heaters. 

Source: http://www.heraldpalladium.com/news/local/d-c-cook-nuclear-plant-unit- 
down-for-refueling/article ffba79ff-5853-560f-86e9-2a51bald4ece.html 

5. September 23, Southern California City News Service - (California) Decommissioning 
San Onofre plant could cost $4.4 billion. Southern California Edison submitted a plan 
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to the U.S. Nuclear Regulatory Commission September 23 stating that the 
decommissioning of the idled San Onofre Nuclear Generating Station in San Diego 
County will cost an estimated $4.4 billion with work slated to begin in early 2016. The 
plant was idled in January 2012 due to a small leak in one of the two reactors. 

Source: http://www.encinitasadvocate.com/news/2014/sep/23/san-onofre-plant- 
decommission/ 



T Return to top i 

Critical Manufacturing Sector 

See item 29 
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Defense Industrial Base Sector 

Nothing to report 
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Financial Services Sector 

6. September 24, Softpedia - (International) New Tinba banking trojan variant is 
stealthier, uses public key signing. Researchers from Trusteer analyzed an updated 
variant of the Tiny Banker (also known as Tinba) financial malware and discovered 
that the authors added a domain generation algorithm (DGA) and fitted it with user- 
mode rootkit capabilities and a verification process to make sure that messages are sent 
from an authentic bot master. 

Source: http://news.softpedia.com/news/New-Tinba-Banking-Troian-Variant-Is- 
Stealthier-Uses-Public-Kev-Signing-459834.shtml 

7. September 23, SecurityWeek - (International) Digital currency tech chief pleads 
guilty in fraud. A former Liberty Reserve executive pleaded guilty in a New York 
federal court September 23 for his role in running an unlicensed online banking 
company that laundered over $6 billion from more than 1 million individuals from 17 
countries, including more than 200,000 people in the U.S, between 2006 and 2013. The 
executive was one of seven individuals charged in what is believed to be the largest 
money laundering prosecution in history. 

Source: http://www.securitvweek.com/digital-currencv-tech-chief-pleads-guilty-fraud 

8. September 23, National Journal - (International) Federal regulators force shutdown 
of fake bitcoin-mining operation. A federal court in Missouri ordered Kansas-based 
Butterfly Labs to temporarily cease operations after the Federal Trade Commission 
alleged that the company marketed its computers as able to generate the Bitcoin virtual 
currency, but failed to deliver the equipment, bilking more than 20,000 customers out 
of tens of millions of dollars. 
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Source: http://www.nextgov.com/mobile/2014/09/federal-regulators-force-shutdown- 
fake-bitcoin-minin g-operation/9487 1 / 

9. September 23, Bloomberg News - (International) Barclays fined twice in one day for 
compliance failures. Barclays Pic, agreed September 23 to pay $15 million in 
penalties to resolve charges by the U.S. Securities and Exchange Commission that the 
company failed to maintain an adequate internal compliance system related to the firm 
acquiring Lehman Brothers in 2008 and made trades and charged commissions without 
customer approval. Barclays also agreed September 23 to pay regulators in the U.K. 
about $62 million in fines to settle allegations that the company failed to protect 16.5 
pounds of client assets between 2007 and 2012. 

Source: http://www.businessweek.com/news/2014-09-23/barclavs-fined-twice-in-one- 
day-for-compliance-failures 

[ Return to top ] 

Transportation Systems Sector 

10. September 23, KTBC 7 Austin - (Texas) Threat of fire causes evacuation of plane at 
ABIA. Passengers aboard a Southwest Airlines flight en route to Dallas were forced to 
use evacuation slides after the plane made an emergency landing at Austin-Bergstrom 
International Airport shortly after takeoff September 23 after emergency ground crews 
detected a hot spot on a wing. All 107 passengers and five crew members were safely 
evacuated with no injuries reported. 

Source: http://www.mvfoxaustin.com/story/26605612/passengers-use-slides-to- 
evacuate-plane-after-emergency-landing-at-abia 

11. September 23, KTVU 2 Oakland - (California) Northbound lanes of 1-680 reopen 
after wet concrete spill. Both directions of Interstate 680 in San Ramon were reopened 
after shutting down for 3 hours September 23 when a truck carrying barrels of wet 
concrete crashed into another vehicle and into the center divider, spilling the concrete 
mixture all over the highway damaging at least 8 other vehicles. Two people suffered 
minor injuries. 

Source: http://www.ktvu.com/news/news/local/barrels-spilled-freewav-crashes-slow- 
680-commute/nhScs/ 

12. September 23, CNN - (Alabama) 3 people dead in Alabama UPS shooting. Two 
employees were shot and killed by a recently-terminated UPS worker who opened fire 
at a facility in Inglenook, Alabama, September 23 prior to taking his own life. 
Authorities are investigating the incident. 

Source: http://www.cnn.com/2014/09/23/iustice/alabama-ups-shooting- 
deaths/index.html 

13. September 22, KTVT 11 Fort Worth - (Texas) Back-to-back emergency landings at 
DFW Airport. Two American Airlines flights made emergency landings minutes apart 
at Dallas-Fort Worth International Airport September 22 as flights to Buenos Aires, 
Argentina, and Fresno were forced to return due to unrelated mechanical problems. The 
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first flight from Dallas to Buenos Aires returned due to an in-flight emergency when 
the pilot reported indications of pressurization problems while the second flight to 
Fresno returned due to unknown mechanical issues. 

Source: http://dfw.cbslocal.com/2014/Q9/22/aa-flight-lands-safely-at-dfw-after-in- 
flight-emergency/ 

14. September 22, St. Louis Post-Dispatch - (Missouri) Interstate 70 reopens after 2 
injured in crash near Wright City. Two people were injured in a 4- vehicle accident 
involving 3 semi-trucks and an SUV that caused the 6-hour closure of westbound lanes 
of Interstate 70 in Wright City. 

Source: http://www.stltodav.com/news/local/crime-and-courts/interstate-reopens-after- 
injured-in-crash-near-wright-city/article 3650012a-8609-5799-8ae9- 
37a9f621ec71.html 



For additional stories, see items 3 and 31 
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Food and Agriculture Sector 

15. September 24, Torrington Register Citizen - (Connecticut) Chemical spill at North 
Canaan farm sends two to hospital. Two workers from Elm Knoll Farm in North 
Canaan were transported to an area hospital September 23 after a pipe malfunction led 
to the improper amounts of sodium hypochlorite and phosphoric acid being mixed 
during a cleaning process, causing a vapor cloud from the chemical reaction. Crews cut 
power to the barn where the incident occurred while Connecticut Department of Energy 
and Environmental Protection officials investigated and cleared the scene. 

Source: http://www.registercitizen.com/general-news/20140923/chemical-spill-at- 
north-canaan-farm-sends-two-to-hospital 

16. September 23, U.S. Department of Agriculture - (National) Indiana firm recalls 
uncured beef corn dogs due to possible temperature abuse. The Food Safety and 
Inspection Service announced September 23 that Monogram Comfort Foods issued a 
recall for approximately 607 pounds of its Applegate Naturals Gluten-free Uncured 
Beef Com Dogs after a routine inspection of a distributor’s warehouse revealed the 
product was stored in a dry storage area instead of a freezer. The product was sold in 
10-ounce cartons and distributed in several States. 

Source: http://www.fsis.usda.gov/wps/portal/fsis/topics/recalls-and-public-health- 
alerts/recall-case-archive/archive/2014/recall-059-2014-release 



For another story, see item 3 
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Water and Wastewater Systems Sector 
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17. September 24, Marietta Daily Journal - (Ohio) Two sewage overflows reported in 



Marietta. Two sewage overflows were announced by the Cobb County Water System 
September 24, including a wastewater manhole overflow that discharged about 100 
gallons of sewage into a tributary of Bishop Lake Creek September 18. The second 
overflow leaked an estimated 420 gallons of wastewater into a tributary of Rubes Creek 
September 21. 

Source: http ://mdj online .com/view/full story/25 8 24865/article-T wo- sewer-overflows - 
reported-in-Marietta 

18. September 22, Associated Press - (International) Mexico warns Arizona of waste 
spill into river. The Arizona Department of Environmental Quality is testing the water 
from the San Pedro River after Mexican authorities notified officials that the water may 
be contaminated with toxic waste that traveled north after a copper mine spill in 
Mexico. 

Source: http://abcnews.go.com/Intemational/wireStorv/mexico-alert-mine-spill-river- 
ariz-25679517 



For another story, see item 2 
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Healthcare and Public Health Sector 



19. September 23, WFIE 14 Evansville - (Kentucky) Data breach at Owensboro medical 
practice. Owensboro Medical Practice and its business associate Research Integrity in 
Kentucky notified about 3,000 patients of a data breach after the medical practice 
learned that former employees allegedly stole the information in 201 1 in an attempt to 
contact patients to join them in their own business. 

Source: http://www.14news.com/storv/26609328/data-breach-at-owensboro-medical- 
practice 
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Government Facilities Sector 

20. September 24, KXTV 10 Sacramento - (California) King Fire containment nearly 
doubles. Fire crews reached 35 percent containment September 23 of the 89,574-acre 
King Fire burning in El Dorado and Placer counties, while 21,000 structures remained 
threatened and about 2,800 residents were still under evacuation orders. 

Source: http://www.newsl0.net/story/news/local/eldorado-hills/2014/09/23/king-fire- 
containment-nearly-doubles/16093399/ 

21. September 23, WGCL 46 Atlanta - (Georgia) 3 court reporters charged with stealing 
nearly $500,000. Three Cherokee County court reporters were charged with stealing 
nearly $500,000 from the county by intentionally rearranging court records and billing 
the county for pages of reports that did not exist. Authorities found irregularities in 
billing dating as far back as 2006. 

Source: http://www.cbs46.com/story/26607952/3-court-reporters-charged-with- 
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stealing-nearly-500000 



22. September 23, Cincinnati Enquirer - (Kentucky) Covington school to reopen 

Wednesday. Classes resumed September 24 at John G. Carlisle Elementary School in 
Covington after students were evacuated and the school was closed September 23 due 
to a water main break that left the building without water. 

Source: http://www.cincinnati.com/storv/news/education/2014/09/23/water-outage- 
closes-covington-elementary/1 6091 109/ 

For another story, see item 31 
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Emergency Services Sector 

23. September 23, Bluefiekl Daily Telegraph - (West Virginia) Phone outage impacting 
McDowell County 911. McDowell County authorities worked with Frontier 
Communications to fix an issue that caused 9-1-1 service for the 875 exchange in War, 
Berwind, and surrounding areas to go down September 23. Officials urged the public to 
visit the local fire department in case of an emergency until the problem is resolved. 
Source: http://www.bdtonline.com/news/article e5eefd0e-436e-l Ie4-b4ba- 
8f2268d3elcl.html 

24. September 23, Ruidoso News - (New Mexico) Lincoln, Otero county 911 system 
rerouted during outage. Crews worked to repair a damaged CenturyFink fiber optic 
cable September 23 after the line broke September 22 causing 9-1-1 service in Otero 
and Fincoln counties to go down. Emergency calls were temporarily being rerouted 
through Pecos Valley, Roswell. 

Source: http://www.ruidosonews.com/ruidoso-news/ci 26591670/lincoln-otero-county- 
91 1-system-rerouted-during-outage 

25. September 23, Associated Press - (Arizona; Nevada) Arizona inmate captured 
months after escaping from jail by breaking apart security fence. Authorities 
captured an escaped inmate September 22 in the Fas Vegas area after he fled from the 
Camp Verde jail in Arizona July 12 by climbing atop a basketball hoop and pulling 
apart a security fence. The jail has since removed the basketball hoop and the sheriffs 
office updated its inmate classification system and secured the jail’s cameras. 

Source: 

http://www.greenfieldreporter.eom/view/story/5994bed5ea4948498bfb99c08bde939f/U 
S— Arizona- Jail-Escape 

26. September 23, WLS 7 Chicago - (Illinois) IDOC: Inmate escapes minimum-security 
Vandalia Correctional Center. Illinois Department of Corrections officers are 
searching for an inmate who escaped from the Vandalia Correctional Center September 
23 as he was returning from commissary. 

Source: http://abc7chicago.com/news/idoc-inmate-escapes-minimum-securitv- 
vandalia-correctional-center/32 1 27 8/ 
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Information Technology Sector 

27. September 24 , Threcitpost - (International) Mozilla to part ways to SHA-1. Mozilla 
asked Certificate Authorities and Web sites to upgrade certificates to SHA-256, SHA- 
384, or SHA-512 after experts reported that SHA-1 will be practical for collision 
attacks by 2018. Mozilla will release warnings to update certificates on versions of 
Firefox in early 2015. 

Source: http://threatpost.com/mozilla-latest-to-part-wavs-with-sha-l/108495 

28. September 24, Computerworld - (International) Fiberlink wipes one smartphone or 
tablet every three minutes. Researchers at Fiberlink examined 130,000 devices 
managed by MaaS360 and found that one mobile device is wiped every 3 minutes. The 
study also determined that in 2013 businesses, on average, cleared 10 percent to 20 
percent of their entire device populations yearly. 

Source: http://www.networkworld.com/article/2687065/mdm-mam/fiberlink-wipes- 
one-smartphone-or-tablet-every-three-minutes.html 

29. September 24, Help Net Security - (International) Mitigations for Spike DDoS 
toolkit-powered attacks. Akamai Technologies released an advisory alerting 
enterprises of the Spike distributed denial of service (DDoS) toolkit that runs on a 
Windows system and can launch infrastructure-based and application-based DDoS 
payloads including SYN flood, UDP flood, GET flood, and Domain Name system 
(DNS) query floods. The toolkit can be mitigated be implementing access control lists 
(ACLs). 

Source: http://www.net-security.org/secworld.php?id=17406 

30. September 23, The Register - (International) Apple’s new iPhone 6 vulnerable to last 
year’s TouchID fingerprint hack. Lookout researchers found that a vulnerability that 
could allow access into Apple’s iPhone 6 and 6 Plus models through their TouchID 
fingerprint sensors remained unpatched. Scammers can unlock the devices by creating 
a fake fingerprint, the same flaw that was found in the iPhone 5S model in 2013. 

Source: 

http://www.theregister.co.uk/2014/09/23/iphone 6 still vulnerable to touchid fingerp 
rint hack / 



Internet Alert Dashboard 



To report cyber infrastructure incidents or to request information, please contact US-CERT at soc@us-cert.gov or 
visit their Web site: http://www.us-cert.gov 

Information on IT information sharing and analysis can be found at the IT ISAC (Information Sharing and 
Analysis Center) Web site: http://www.it-isac.org 
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Communications Sector 



See item 24 
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Commercial Facilities Sector 

31. September 24, WTSP 10 St. Petersburg - (Florida) U.S. 41 reopens after huge 
restaurant fire. Officials are investigating the cause of a September 24 fire that 
destroyed the Shenaniganz Grill and Chill restaurant in Apollo Beach and prompted the 
evacuation of area homes and a shelter-in-place order for a nearby elementary school. 
U.S. Highway 41 was closed for over 5 hours while firefighters battled the blaze. 
Source: http://www.wtsp.com/story/news/local/2014/09/24/fire-crews-battle-fire-at- 
shennani gaz- grill-and-chill-in-apollo-beach/ 16141031/ 

32. September 24, Boston Globe - (Massachusetts) South Boston day care center 
evacuated due to odor. A community center in Boston was evacuated and closed 
September 24 due to an odor that filled a day care center in the building while 
contractors were working on underground pipes. The building was ventilated and a 
HAZMAT team’s investigation found that the odor did not pose health risks. 

Source: http://www.bostonglobe.com/metro/2014/09/24/boston-day-care-center- 

evacuated-due-odor-from-construction-work- 

street/CERuqE3qYrld27KSgiJ17H/story.html 

33. September 23, Reuters - (Florida) Two suspects in Florida store shooting die in car 
crash. The Osceola Square Mall and adjoining Florida Technical College in 
Kissimmee were evacuated September 23 following a shooting at a Ross Dress for Less 
store inside the mall that left two individuals wounded. The two suspected gunmen 
were killed in a car crash as they fled the scene. 

Source: http://news.vahoo.com/florida-mall-tech-college-evacuated-shooting- 
010814054.html 



34. September 23, Associated Press - (Maryland) DNA on fake beard does in Md. 
jewelry thief. A Washington, D.C. man pleaded guilty during the week of September 
15 to holding up a Queenstown, Maryland jewelry store and stealing $362,000 worth of 
diamond rings in May 2013. Police were able to identify the man after they analyzed 
DNA that was found on a fake beard that the man discarded after he wore it as a 
disguise during the theft. 

Source: http://www.cbsnews.com/news/dna-on-fake-beard-does-in-maryland-iewelry- 
thief/ 
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Dams Sector 



Nothing to report 
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NTAS 



NO ACTIVE ALERTS 

www.DHS.gov/alerts 
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About the reports - The DHS Daily Open Source Infrastructure Report is a daily [Monday through Friday] 
summary of open-source published information concerning significant critical infrastructure issues. The DHS Daily 
Open Source Infrastructure Report is archived for 10 days on the Department of Homeland Security Web site: 
http://www.dhs.gov/IPDailyReport 

Contact Information 

Content and Suggestions: Send mail to cikr.productfeedback@hq.dhs.gov or contact the DHS 

Daily Report Team at (703) 942-8590 

Subscribe to the Distribution List: Visit the DHS Daily Open Source Infrastructure Report and follow 

instructions to Get e-mail updates when this information changes . 

Removal from Distribution List: Send mail to support @ govdelivery.com . 



Contact DHS 

To report physical infrastructure incidents or to request information, please contact the National Infrastructure 
Coordinating Center at nicc@hq.dhs.gov or (202) 282-9201. 

To report cyber infrastructure incidents or to request information, please contact US -CERT at soc@us-cert.gov or visit 
their Web page at www.us-cert.gov . 

Department of Homeland Security Disclaimer 

The DHS Daily Open Source Infrastructure Report is a non-commercial publication intended to educate and inform 
personnel engaged in infrastructure protection. Further reproduction or redistribution is subject to original copyright 
restrictions. DHS provides no warranty of ownership of the copyright, or accuracy with respect to the original source 
material. 
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